Tenda Jd12L vulnerabilities

CVE-2026-13516 [HIGH] CWE-119 CVE-2026-13516: A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSe A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet. Performing a manipulation of the argument shareSpeed results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

CVE-2026-13519 [HIGH] CWE-119 CVE-2026-13519: A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function fromNatStaticSetting A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

CVE-2026-13517 [HIGH] CWE-119 CVE-2026-13517: A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the function formWifiBasic A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the function formWifiBasicSet of the file /goform/WifiBasicSet. Executing a manipulation of the argument security_5g can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used.

CVE-2026-13518 [HIGH] CWE-119 CVE-2026-13518: A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

CVE-2026-13515 [HIGH] CWE-119 CVE-2026-13515: A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function form A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such manipulation of the argument startIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.